Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
File: JUn0XvILUG6o70y2gsLKJwGykLQ.mft (raw, json)
Hash identifier: LghJJGPL1Bz/ZCZvONzqm7M0mbVltmAwJT6Ze+Fs9RM=
Subject key identifier: 81:01:5D:43:A3:2F:FB:AE:D0:81:18:7E:0E:A5:9C:00:FA:52:CE:AB
Authority key identifier: 25:49:F4:5E:F2:0B:50:6E:A8:EF:4C:B6:82:C2:CA:27:01:B2:90:B4
Certificate issuer: /CN=2549f45ef20b506ea8ef4cb682c2ca2701b290b4
Certificate serial: 019A5074DCF05A9F06706C59ED3DD65103A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 20:00:27 +0000
Manifest this update: Tue 04 Nov 2025 20:00:27 +0000
Manifest next update: Wed 05 Nov 2025 20:00:27 +0000
Files and hashes: 1: IkDVoWMCW8T1OT9ORyQk9bDyazo.roa (hash: ezW06KpxDOFFcxPPKXXfQ4CRQ3FYkfmYYJN8bIHB94g=)
2: JUn0XvILUG6o70y2gsLKJwGykLQ.crl (hash: IHSgQ7XgpVvWhxa6UFNR52lgWVrMCAnVwlY4J2x1PFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:dc:f0:5a:9f:06:70:6c:59:ed:3d:d6:51:03:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2549f45ef20b506ea8ef4cb682c2ca2701b290b4
Validity
Not Before: Nov 4 20:00:27 2025 GMT
Not After : Nov 5 20:00:27 2025 GMT
Subject: CN=81015d43a32ffbaed081187e0ea59c00fa52ceab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:70:bb:69:da:22:f8:93:a3:c6:1f:4b:08:bb:
fb:d4:33:2c:28:4e:67:f2:de:f3:0b:51:2f:ce:26:
f0:0d:97:bc:6e:09:b1:74:62:c7:02:5e:42:5b:bc:
53:5d:a9:6d:1d:db:97:8d:01:4d:6a:42:9d:97:90:
53:ce:7c:70:98:f4:7c:3d:c4:90:27:05:61:5b:68:
24:81:cb:fd:b7:d5:0a:79:e7:d6:60:ac:36:75:a6:
09:16:8a:f3:6e:dd:e3:5e:60:7b:a0:a3:54:41:34:
19:be:55:f1:36:fe:2d:7b:a9:e5:41:43:e4:e2:87:
f1:37:06:6e:09:ec:cd:e8:87:ec:3f:b1:64:e0:47:
fa:81:c5:b9:2f:f6:be:4e:f6:5d:32:3b:3d:97:0d:
6d:2a:47:57:3a:a9:74:fc:92:96:e0:f4:26:d6:17:
ea:f2:1a:9b:b6:3e:51:b3:cc:7a:aa:ba:75:c3:6c:
03:c0:0c:40:12:19:5f:13:95:85:fb:bc:3b:52:e1:
1a:59:18:f0:eb:b4:ca:ee:f2:d2:55:57:02:5c:19:
da:3f:7e:21:89:2f:8a:c1:38:13:e1:79:01:62:98:
bc:ba:fb:53:7d:44:15:5d:bc:da:1b:44:d5:f3:65:
8b:6a:56:df:a2:a5:ac:18:a8:1b:b3:cf:ac:27:76:
4e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:01:5D:43:A3:2F:FB:AE:D0:81:18:7E:0E:A5:9C:00:FA:52:CE:AB
X509v3 Authority Key Identifier:
keyid:25:49:F4:5E:F2:0B:50:6E:A8:EF:4C:B6:82:C2:CA:27:01:B2:90:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:55:d7:e3:64:ad:10:fc:61:54:60:ba:99:58:af:52:0b:22:
ed:7e:ba:d3:8d:6d:5f:bf:af:e8:42:0c:b9:67:20:5a:20:ad:
2c:e1:fc:e4:ea:c4:10:f2:35:1a:e5:e6:c4:55:22:37:ea:81:
0d:48:20:d7:28:a3:1a:fc:27:75:b0:b8:df:dc:df:4a:3a:7d:
e8:2e:3e:e0:17:64:1d:e2:39:b6:dd:8b:e8:30:fc:e7:e2:91:
80:4c:96:ca:1d:28:8f:7a:81:24:ff:03:5b:f0:3d:5c:62:4f:
c6:d1:ab:9e:96:61:25:bc:fa:2e:e1:0a:46:cf:75:1c:04:ff:
a4:a3:a5:e7:09:e8:eb:cb:72:85:56:13:61:87:cd:1a:e1:d0:
7c:57:1f:a9:37:27:6b:6e:21:5e:87:1a:77:d1:b0:f6:6e:0d:
14:ca:23:db:93:49:88:e4:7f:46:87:b9:b6:b3:6f:71:b7:17:
38:33:13:da:98:da:82:b2:25:91:90:79:9c:b5:bf:06:a7:3a:
7e:13:69:0c:54:43:b0:1e:38:6b:24:c9:76:88:5a:ff:6f:c3:
51:ec:18:b9:ba:93:bc:12:bf:32:ec:e8:38:05:76:de:f7:2e:
5a:ba:a3:cb:9d:a3:e4:83:c3:86:66:31:7e:da:1a:a2:91:2c:
66:b0:49:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:52:30 2025 by rpki-client